Ephemeral GitHub Actions runners.
One binary, every platform.

Secure, isolated, disposable CI environments on Linux, Windows, and macOS.
No Kubernetes. No Docker Desktop. Just one binary.

Embeds containerd as a Go library. No runtime dependencies beyond the OS kernel.

Linux containers, Hyper-V on Windows, Virtualization.framework on macOS. Same OCI images everywhere.

Every job runs in full isolation. Ephemeral environments destroyed after each run. Network firewall blocks LAN access.

GitHub Actions, Forgejo, Gitea, GitLab, and Woodpecker. One daemon, choose your provider.

Polling mode works behind NAT with no inbound ports. Or opt into webhook tunnels for instant delivery.

Per-job macOS VMs via APFS clone-on-write. Xcode, Swift, code signing — all ephemeral.